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CP/M Dynamic Debugging Tool (DDT) 
User's Guide 


I. Introduction. 

The DDT program allows dynamic interactive testing and debugging of 
programs generated in the CP/M environment. The debugger is initiated by 
typing one of the following canmands at the CP/M Console Command level 

DDT 

DDT filename .HEX 

DDT filename.COM 

where "filename" is the name of the program to be loaded and tested. In both 
cases, the DDT program is brought into main memory in the place of the Console 
Command Processor (refer to the CP/M Interface Guide for standard memory 
organization) , and thus resides directly below the Basic Disk Operating System 
portion of CP/M. The BDCS starting address, vhich is located in the address 
field of the JMP instruction at location 5H, is altered to reflect the reduced 
Transient Program Area size. 

The second and third fonts of the DDT command shown above perform the same 
actions ss^ the first, except there is a subsequent automatic load of the 
specified HEX or COM file. The action is identical to the seouence of 
commands 

DDT 

Ifilename.HEX or Ifilename.COM 

R 

where the I and R commands set up and read the specified program to test (see 
the explanation of the I and R ccmmands below for exact details) . 

Upon initiation, DDT prints a sign-on message in the format 
DDT VER m.m 
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Following the sign on message, DOT prompts the operator with the character 
,t “'° and waits for incut commands from the console. The operator can type any 
of several single character commands, terminated by a carriage return to 
execute the command. Each line of input can be line-edited using the standard 
CP/M controls 


eubout remove the last character typed 

ctl-U ranove the entire line, ready for re-typing 

ctl-C system reboot 

Any command can be up to 32 characters in length (an automatic carriage return 
is inserted as the 33rd ciaracter) , where the first character determines the 
cornand type 

A enter assemoly language mnemonics with operands 

D display memory in hexadecimal and ASCII 

F fill memory with constant data 

G begin execution with optional breakpoints 

I set up a standard input file control block 

L list memory using assembler mnenonics 

M move a memory segment from source to destination 

R read program for subsequent testing 

S substitute memory values 

T trace program execution 

U un traced program monitoring 

X examine and actional ly alter the CPU state 

character in some cases, is followed by zero, one, two, or three 
values which are separated by commas or single blank characters. 
All DDT numeric output is in hexadecimal form. In all cases, the commands are 
not executed until the carriage return is typed at the end of the command. 

At any point in the debug run, the operator can stop execution of DDT 
using either a ctl™C or G0 (jmp to location 0000H) , and save the current 
memory image using a SAVE command of the form 

SAVE n filename.COM 

where n is the nuitcer of pages (256 byte blocks) to be saved on disk. The 
number of blocks can be determined by taking the hicn order bvte of the top 
load address and converting this number to decimal. For example, if the 
highest address in the Transient Program Area is 1234H then the number of 
pages is 12H, or 18 in decimal. Thus the ccerator could tvce a ctl-C during 
the debug run, returning to the Console Processor level, followed by 

SAVE 18 X.COM 

The memory image is saved as X.COM cn the diskette, and can be directiv 
executed by simply typing the name X. If further tasting is recuired, the 
memory image can be recalled by typing 


The command 
hexadecimal 



DDT X.CCM 


•which reloads previously saved program from loaction 100H tnrough page 18 
(12FFH). The machine state is not a part of the COM file, ard thus the 
program must be restarted from the beginning in order to properly test it. 


II. DDT COMMANDS. 

The ^individual canmands are given below in some detail. In each cas e , the 
operator must wait for the prompt character (-) before entering the command. 
If control is passed to a program under test, and the program has not reached 
a breakpoint, control can be returned to DDT by executing a RST 7 from the 
front panel (note that the rubout key should be used instead if the program is 
executing a T or U command). In the explanation of each command, the command 
letter is shown in some cases with numbers separated by commas, where the 
numbers are represented by lower case letters. These numbers are always 
assumed to be in a hexadecimal radix, and from one to four digits in length 
(longer numbers will be automatically truncated on the right). 

Many of the commands operate upon a "CPU state" which corresponds to the 
under test. The CPU state holds the registers of the program being 
debugged, and initially contains zeroes for all registers and flags except for 
the program counter (P) and stack pointer (S) , which default, to 100H. The 
program counter is. subsequently set to the starting address given in the last 
record of a HEX file if a file of this form is loaded (see th£ I and R 
canmands) . 

1. The A (Assemble) Command. DOT allows inline assembly language to be 
inserted into the current memory imaae using the A command 'which takes the 
form 

As 

where s is tne hexadecimal starting address for the inline assembly. DDT 
prompts the console with the address of the next instruction to fill, and 
reads the console, looking for assembly language rmemonics (see the Intel 8080 
Assembly language Reference Card for a list of mnemonics) , followed by 
register references and operands in absolute hexadecimal form. Each sucessive 
load address is printed before reading the console. The A command terminates 
when the first empty line is input from the console. 


Upon completion of assembly language input, the operator can review the 
memory segment using the DDT disassembler (see the L command) . 

Note that the assembler/disassembler portion of DDT can be overlayed by 
the transient program being tested, in which case the DDT program responds 
with an error condition vhen the A and L commands are used (refer to Section 
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2. The D (Display) Command. The D command allows the operator to view 
the contents of memory in hexadecimal and ASCII formats. The forms are 

D 

Ds 

Ds,f 


In the first case, memory is displayed from the current display address 
(initially 100H) , and continues for 16 display lines. Each display line takes 
the form shown below 

aaaa bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb cccccccccccccccc 

where aaaa is the display address in hexadecimal, and bb represents data 
present in memory starting at aaaa. The ASCII characters starting at aaaa are 
given to the right (represented by the sequence of c's) , where non-graphic 
characters are printed as a period („) symbol. Note that both upper and lower 
case alphabetics are displayed, and thus will appear as upper case symbols on 
a console device that supports only upper case. Each display line gives the 
values of 16 bytes of data, except that the first line displayed is truncated 
so that the next line begins at an address which is a multiple of 16. 

The second form of the D command shown above is similar to the first, 
except that the display address is first set to address s. The third form 
causes the display to continue from address s through address f. In all 
cases, the display address is set to the first address not displayed in this 
command, so that a continuing display can be accomplished by issuing 
successive D commands with no explicit addresses. 

Excessively long displays can be aborted by pushing the rubout key. 


3». The F (Fill) Command. The F command takes the form 
Fs,f,c 

where s is the starting address, f is the final address, and c is a 
hexadecimal byte constant. The effect is as follows: DCT stores the constant 
c at address s, increments the value of s and tests against f. If s exceeds f 
then the operation terminates, other ’wise the operation is repeated. Thus, the 
fill command can be used to set a memory block to a specific constant value. 


4. The G (Go) Command. Program execution is started using the G ccmand, 
with up to two optional breakpoint addresses. The G command takes one ot the 
forms 

G 

Gs 

C-s,b 
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Gs,b, c 

G,b 

G,b,c 

The first fonn starts execution of the program under test at the current value 
of the program counter in the current machine state, with no breakpoints set 
(the only way to regain control in DDT is through a RST 7 execution) . The 
current program counter can be viewed by typing an X or XP command. Hie 
second form is similar to the first except that the program counter in the 
current machine state is set to address s before execution begins. The third 
form is the same as the second, except that program execution stops when 
address b is encountered (b must be in the area of the program under test) . 
The instruction at location b is not executed when the breakpoint is 
encountered. The fourth form is identical to the third, except that two 
breakpoints are specified, one at b and the other at c. Encountering either 
breakpoint causes execution to stop, and both breakpoints are subsequently 
cleared. The last two forms take the program counter from the current machine 
state, and set one and two breakpoints, respectively. 

Execution continues frcm the starting address in real-time to the next 
breakpoint. That is, there is no intervention between the starting address 
and the break address by DDT. Thus, if the program under test does not reach 
a breakpoint, control cannot return to DEG? without executing a RST 7 
instruction. Upon encountering a breakpoint, DEG? stops execution and types 

*d 


where d is the stop address. The machine state can be examined at this point 
using the X (Examine) command. The operator must specify breakpoints which 
differ from the program counter address at the beginning of the G command. 
Thus, if the current program counter is 1234H, then the commands 


and 


G,1234 

0400,400 


both produce an immediate breakpoint, without executing any instructions 
whatsoever. 


5. The I (Input) Command. The I command allows the operator to insert a 
file name into the default file control block at 5CH (the file control block 
created by CP/M for transient programs is placed at this location; see the 
CP/M Interface Guide) . The default FCS can be used by the program under test 
as if it had been passed by the CP/M Console Processor. Note that this file 
name is also used by DET for reading additional HEX and COM files. The form 
of the I command is 

Ifilename 

or 
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If ilename.f iietype 


If the second focm is used, and the f iietype is either HEX or COM, then 
subsequent R commands can be used to read the pure binary or hex format 
machine cede (see the R command for further details) . 


5. The L (List) Command. The L command is used to list assembly language 
mnemonics in a particular program region. The forms are 

L 

Ls 

Ls,f 


The first command lists twelve lines of disassembled machine code from the 
current list address. The second form sets the list address to s, and then 
lists &relve lines of code. The last form lists disassembled code from s 
through address f. In all three cases, the list address is set to the next 
unlisted location in preparation for a subsequent L command. Upon 
encountering an execution breakpoint, the list address is set to the current 
value of the program counter (see the G and T commands) . Again, long typeouts 
can be aborted using the rubout key during the list process. 


7. The M (Move) Command. The M command allows block movement of program 
or data areas frem one location to another in memory. The form is 


Ms, f ,d 


where s is the start address of the move, f is the final address of the move, 
and d is the destination address. Data is first moved from s to d, and both 
addresses are incremented. If s exceeds f then the move operation stops, 
otherwise the move operation is repeated. 


8. The R (Read) Command. The R command is used in conjunction 'with the I 
command to read CCM and HEX files from the diskette into the transient pregram 
area in preparation for the debug run. The forms are 


R 

Rb 

wnere b is an optional bias address which is added to each program or data 
address as it is loaded. The load operation must not overwrite any of the 
system parameters from 000H throuqh 0FFH (i.e., the first page of memory). If 
b is omitted , then b=0000 is assumed. The R command requires a previous I 
command, specifying the name of a HEX or CCM file. The load address for each 
record is obtained from each individual HEX record, while an assumed lead 
address of 100H is taken for CCM files. Note that any number of R commands 
can be issued following the I c omma nd to re-read the program under test, 
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assuming the tested program does not destroy the default area at 5CH. 
Further, any file specified with the filetvpe "COM" is assumed to contain 
machine code in pure binary form (created with the LOAD or SAVE command) , and 
all others are assumed to contain machine code in Intel hex format (produced, 
for example, with the ASM command) . 

Recall that the command 

DDT filename. file type 

which initiates the DDT program is equivalent to the commands 
DDT 

-If ilename .f iletype 

-R 


Whenever the R command is issued, DDT responds with either the error indicator 
“? M (file cannot be opened, or a checksum error occurred in a HEX file) , or 
with a load message taking the form 

NEXT PC 
nnnn pppp 

where nnnn is the next address following the loaded program, and pppp is the 
assumed program counter (100H for CCM files, or taken from the last record if 
a HEX file is specified) . 


9. The S (Set) Command. The S command allows memory locations to be 
examined and optionally altered. The form of the command is 

Ss 

where s is the hexadecimal starting address for examination and alteration of 
memory. DDT responds with a numeric prompt, givinq the memory location, along 
with the data currently held in the memory location. If the operator types a 
carriage return, then the data is not altered. If a byte value is typed, then 
the value is stored at the prompted address. In either case, DDT continues to 
prompt with successive addresses and values until either a period (.) is typed 
by the operator, or an invalid input value is detected. 


10. The T (Trace) Command. The T command allows selective tracing of 
program execution for 1 to 65535 program steps. The forms are 

T 

Tn 

In the first case, the CPU state is displayed, and the next program step is 
executed. The program terminates immediately, with the termination address 
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displayed as 


*hhhh 

where hnhh is the next address to execute. The display address (used in the D 
command) is set to the value of H and L, and the list address (used in the L 

command) is set to hhhh. The CPU state at program termination can then be 

examined using the X command. 

The second form of the T command is similar to the first, except that 

execution is traced for n steps (n is a hexadecimal value) before a program 
breakpoint is occurs. A breakpoint can be forced in the trace mode by typing 
a'rubcut character. The CPU state is displayed before each program step is 
taken in trace mode. The format of the display is the same as described in 
the X ccnmtand. 

Note that program tracing is discontinued at the interface to CP/M, and 
resumes after return from CP/M to the program under test. Thus, CP/M 

functions which access I/O devices, such as the diskette drive, run in 
real-time, avoiding I/O timing problems. Programs running in trace mode 
execute approximately 500 times slower than real time since DDT gets control 
after eacn user instruction is executed. Interrupt processing routines can be 
traced, but it must be noted that commands v&ich use the breakpoint facility 
(G, T, and U) accomplish the break using a RST 7 instruction, which means that 
the tested program cannot use this interrupt location. Further, the trace 
mode always runs the tested program with interrupts enabled, which riav cause 
problems if asynchronous interrupts are received during tracina. 

Note also that the operator should use the rubout key to get control back 
to CUT during trace, rather than executing a RST 7, in order to ensure that 
the trace for the current instruction is completed before interruption. 

11. The U (Untrace) Command. The U command is identical to the T command 
except that intermediate program steps are not displayed. The untrace mode 
allows from 1 to 65535 (0FFFFH) steps to be executed in monitored mode, and is 
used principally to retain control of an executing program while it reaches 
steady stats conditions. All conditions of the T command appiy to the U 
command. 


12. The X (Examine) Command. The X command allows selective display and 
alteration of the current CPU state for the program under test. The forms are 

X 

Xr 

where r is one cf the 3080 CPU registers 

C Carry Flag (0/1) 

2 Zero Flag (0/1) 
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M 

Minus Flag 

(0/1) 

E 

Even Parity Flag 

(0/1) 

I 

Intsrdigit Carry 

(0/1) 

A 

Accumulator 

(0-FF) 

B 

BC register pair 

(0-FFFF) 

D 

DE register pair 

( 0-FFFF) 

H 

HL register pair 

(0-FFFF) 

S 

Stack Pointer 

(0-FFFF) 

P 

Program Counter 

(0-FFFF) 


In the first case, the CPU register state is displayed in the format 

CfZfMfEflf A=bb B=dddd D=dddd H=dddd S=ddda P=dadd inst 

where f is a 3 or 1 flag value, bo is a byte value, and dadd is a double byte 
quantity corresponding to the register pair. The “inst'' field contains the 
disassembled instruction which occurs at the . location addressed by the CPU 
state's program counter. 

The second form allows display and optional alteration of register values, 
where r is one of the registers given above (C, Z, M, E, I, A, B, D, H, S, or 
P) . In each case, the flag or register value is first displayed at the 
console. The DDT program then accepts input from the console. If a carriaqe 
return is typed, then the flag or register value is not altered. If a value 
in the proper range is typed, then the flag or register value is altered. 
Note that BC, C£, and HL are displayed as register pairs. Thus, the operator 
types the entire register pair 'when B, C, or the BC pair is altered. 


III. IMPLEMENTATION NOTES. 

The organization of DDT allows certain non-essential portions to be 
overlayed in order to gain a larger transient program area for debugging large 
programs. The DDT program consists of two parts: the DDT nucleus and the 
assembler/disassembler module. The DDT nucleus is loaded ever the Console 
Command Processor, and, although leaded with the DOT nucleus, the 
assembler/disassembler is overlayable unless used to assemble or disassemble. 

In particular, the BDCS address at location 6K (address field of the JMP 
instruction at location 5H) is modified by DDT to address the base location of 
the DDT nucleus which, in turn, contains a JMP instruction to the BDCS. Thus, 
programs 'which use this address field to size memory see the logical end of 
memory at the base of the DDT nucleus rather than the base of the BDCS. 

The assembler /disassembler module resides directly below the DDT nucleus 
in the transient program area. If the A, L, T, or X commands are used during 
the debugging process then the DDT program again alters the address field at 
6H to include this module, thus further reducing the logical end of memory. 
If a program loads beyond the beginning of the assembler /disassemler module, 
the A and L commands are lost (their use produces a " 1 " in response) , and the 
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trace and display (T and X) commands list the “inst" field cf the display in 
hexadecimal , rather than as a decoded instruction. 

IV. m EXAMPLE. 


The following example shows an edit, assemble, and debug for a simple 
program which reads a set of data values and determines the largest .value in 
the set. The largest value is taken from the vector, and stored into “LARGE" 
at the termination cf the program 


ED SCAM 


' t u^ ier 

f-t ^ 1 - 0 OH 



* I 

t-I 

Q R G 

L . L*fST ART OF TRANS IE 

H T * R E R . 


tt VI 

3 .. LEH 

> L E H G T H 0 F VECTOR TO 

SCSN, * 

LOOP--? . 

HVI 

c, a 

. LARGER _RS'T VALUE SO 

F 4 

. 0 - D • 

L LXI 

H, VECT ; B AS E OF VFC 

t n p 

LOOP A 

MOV 

5 UL 

A .. M 

.'•GET VALUE. 

.•LARGER VALUE IN f: -< 

—*—1 


M FOUND 

, JUHP IF LARGER VAi": 

E M 0 r FOUND 



LARGEST V ALU 

E* STORE IT TO C . 


HFOUND : 

WQV 

I NX 

JLl£- 

H # 

; TO NEXT ELEMENT 

Cfistt Souvci 


DCR 

J, 

/MORE TO SCAN? * 


J HZ 

L 00 P 

i FOR ANOTHFP. ; 

P/'qovawi. - (^vui«r{iytec( 

<L 



— — 


END 

OF SCAN, STORE C, 

ctataders ^pcci 

^ pv'o'gT'arrt.m^r 


NOV 

£ . c 

; G E T LARGEST V $ L U E 


S Tfl 

LARGE J 


i j 

'j 

J HP 

TEST 

A 

DATA 

; REBOOT . 

€> 

"/ vew&uk 

fe^U/TA.. 


VECT : 

LEH 

LARGE: 


«aao . 


LOOP : 


MFOUND : 







2 , 9 , A. 3 , 5 ,. i , 5 . 

*-V£CT ; LENGTH -; 

J. . 'LARGEST VALUE QM EXIT 


ORG 
MVI 
H vi 
LX I 
MOV 

sue 

JNC 


1 90 H 
3 , LEH 

c.. a 

H, VECT 
A, H 
C 

HFOUND 


START OF TRANSIENT AREA 
LENGTH OF '-'ECTOR TO SCAN 
LARGEST VALUE SO FAR 
3 ASE OF VECTOR 
GET VALUE 

LARGER VALUE IN C? 


J U HP I F 


N EM 

X 0 V 

LARGEST VALUE, STORE 
C, A 

IT T 

: nx 

H 

;T 0 NEXT 

SLEW 

DCR 

3 

; MORE TO 

SCAN 

J NZ 

LOOP 

i F 0 R ANO 

THER 


LARGER VALUE 
0 C 


NOT 


FOUND 
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HMD OF SCAN, STORE C 

MOV A • C ; GET LARGEST VaL-JE 

STA LARGE 

JHP 0 - REBOOT 


VECT : 

LEW 

LARGE: 


*J -4 


TEST DATA 

DB 2, tf, 4, 3, 3 » 6,1,3 

EQU *-VECT ; LENGTH 

DS 1 ; LARGEST VALUE OH EXIT 

END , 

a — &'aA. fif Siit 


— SWt AssewkW* 

CP/-.M ASSEMBLER - V E ft 1.0 


0 122 

882H USE FACTOR 
END OF ASSEMBLY 

T ¥ P E S C A M . P ft N 


Ass*41s Cuwfltk ' lock or VyaYurfi. Lstiyuj 


Co ds 






a ; 


0 100 

Mockuic Code. 

1 w ' 

\ 

r 

Ok G 

1 0 O H 

SThRT of transient area 

0 190 

9S&3 ; 

MV I 

B, LEN 

LENGTH OF V ECTOR TO SCAN 

0102 

0E08 * 


MV I 

C> O 

L ft R G E S T V ft L U E SO FAR 

9104 

211901 


LX I 

H, VECT. ; 

BASE OF VECTOR 

0 197 

7E 

LOOP: 

MOV 

ft > M 

GET VALUE 

0 100 

9 1 


SUB 

C i 

LARGER VhlUE IN -C? 

0 109 

D20D0 1 


JNC 

WFQUND 

JUMP I? LARGER VALUE NOT 



, 

NEW 

LARGEST V ALOE 

• STORE IT TO C 

9 i 8C 

4F 


MO V 

C, A 


0 189 

23 

NFOUHS : 

r h x 

H 

TO NEXT ELEMENT 

8 1 0 E 

05 


DC R 

B 

MORE TO S C A N ? 

9 1 0F 

C 20 79 1 


JH2 

LOOP ; 

FOR ANOTHER 



; 

END 

0 P SCAN, STOP 

S’ ’■*' 

9112 

79 


MOV 

ft , c 

get largest ^alue 

0 113 

322 1 0 1 


3 7ft 

L A R C E 


91 IS 

C30990 , 


JMP 

0 

REBOOT 

Cd±!ca a Iictm* 
'tYurtaid 

ft 

TEST 

BA T ft 


0 119 

0208049305 VECT.- 

Be 

2 .. 0 > 4 • 3 , 5 

> €j 1*3 

0983 

s i < 7\ 

LEN 

EQU . 

1 - V EC T 

LENGTH 

9 121 

9 122 

\ 

VflluEGI ) 

LARGE: 

BS 

END 

i 

• j 

LARGEST VALUE ON EXIT 


FOUND 


U 



S>-Wt Tjev^tf Us^j Va -Wwc t m&cUim (At 


DDT 3 CAN. HEX 


l 6 K DDT V E ft 1.0 
NEXT PC 
0 1 2L 0009 

- V • m i - 


last bad aSf&* 


, — ivtsfrucna* 

» 4© €xeack of 

C920M0E0I 0 3 = 00 3=0000 0=6833 H=0000 3*0100 P*8088 OUT 7F 

'Cfjz&.sxt Wfije ieU^f mw» 

P -«90 0 0 10 0 


cU*y ft -to LOO 

\-Cck fit '/tttsbrs <^ain 


r 


PC cU*^- 


C020M0E0I O 

A = 0 0 8 ■ 

-L 1 &0 

s ) 


0 1 00 

V 

MV I 

3 j 9 8 

0 1 02 

M VI 

C , @9 

0 1 04 

L X I 

H°, 9 l 1 ? 

0 107 

MOV 

A, fl 

0100 

sue 

C 

0 1 00 

JNC 

9 10D 

0 1 0C 

MOV 

C , H 

0 1 30 

I NX 

H 

?18E 

DCft 

8 

0 1 0F 

J HZ 

9 i 9 7 

3 112 
-L 

MOV 

A, C 




0113 

STft 

9 1 2 i 

0 1 1 S 

JMP 

9890 

0 1 1 3 

STAX 

2[ 

8 1 l A 

HOP 


o 1 1 e 

I Nft 

5» 

0 1 l c 

1 NX 

3 

31 ID 

OCR 

3 

01 IE 

MV I 

3,81 

0129 

DCft 

3 

0 121 

LX I 

0 , £23 3 

0 124 

LXI 

H, 3 29 3 


3=0y 3=0000 D = 0 0 0 0 H = 0 0 0 0 3*01 00 P = 0 1 0 0 “VI 3 .• 0 3 

kWc ivdtmcW 
"to Atcutte at ?<f s \60 


r Dtsa«mlLi RacLuw, 
Code ad IOOH 

SoifCi UCi'jW 


- Hi I 

•0 115 
0 117 
- Li 1 
0113 

0 i 1 1$ 
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